ZyXEL Communications RGS Series, User Manual

Page: 84 / 259

84
ARP
: Only ARP frames can match this ACE. Notice the ARP frames won't match the
ACE with Ethernet type.
IPv4
: Only IPv4 frames can match this ACE. Notice the IPv4 frames won't match the
ACE with Ethernet type.
IPv6
: Only IPv6 frames can match this ACE. Notice the IPv6 frames won't match the
ACE with Ethernet type.
Action Specify the action to take with a frame that hits this ACE.
Permit
: The frame that hits this ACE is granted permission for the ACE operation.
Deny
: The frame that hits this ACE is dropped.
Filter
: Frames matching the ACE are filtered.
Rate Limiter Specify the rate limiter in number of base units. The allowed range is
1
to
16
.
Disabled
indicates that the rate limiter operation is disabled.
Port Redirect Frames that hit the ACE are redirected to the port number specified here. The rate
limiter will affect these ports. The allowed range is the same as the switch port
number range.
Disabled
indicates that the port redirect operation is disabled and
the specific port number of 'Port Redirect' can't be set when action is permitted.
Mirror
Specify the mirror operation of this port. Frames matching the ACE are mirrored to the
destination mirror port. The rate limiter will not affect frames on the mirror port. The
allowed values are:
Enabled
: Frames received on the port are mirrored.
Disabled
: Frames received on the port are not mirrored.
The default value is "Disabled".
Logging
Specify the logging operation of the ACE. Notice that the logging message doesn't
include the 4 bytes CRC information. The allowed values are:
Enabled
: Frames matching the ACE are stored in the System Log.
Disabled
: Frames matching the ACE are not logged.
Note: The logging feature only works when the packet length is less than
1518(without VLAN tags) and the System Log memory size and logging rate is
limited.
Shutdown
Specify the port shut down operation of the ACE. The allowed values are:
Enabled
: If a frame matches the ACE, the ingress port will be disabled.
Disabled
: Port shut down is disabled for the ACE.
Note: The shutdown feature only works when the packet length is less than
1518(without VLAN tags).
Counter The counter indicates the number of times the ACE was hit by a frame.
MAC Parameters
SMAC Filter (Only displayed when the frame type is Ethernet Type or ARP.)
Specify the source MAC filter for this ACE.
Any
: No SMAC filter is specified. (SMAC filter status is "don't-care".)
Specific
: If you want to filter a specific source MAC address with this ACE, choose
this value. A field for entering an SMAC value appears.
SMAC Value
When "Specific" is selected for the SMAC filter, you can enter a specific source MAC
address. The legal format is "xx-xx-xx-xx-xx-xx" or "xx.xx.xx.xx.xx.xx" or
"xxxxxxxxxxxx" (x is a hexadecimal digit). A frame that hits this ACE matches this
SMAC value.
DMAC Filter
Specify the destination MAC filter for this ACE.
Any
: No DMAC filter is specified. (DMAC filter status is "don't-care".)
MC
: Frame must be multicast.
BC
: Frame must be broadcast.
UC
: Frame must be unicast.
Specific
: If you want to filter a specific destination MAC address with this ACE,
choose this value. A field for entering a DMAC value appears.
DMAC Value When "Specific" is selected for the DMAC filter, you can enter a specific destination
MAC address. The legal format is "xx-xx-xx-xx-xx-xx" or "xx.xx.xx.xx.xx.xx" or
"xxxxxxxxxxxx" (x is a hexadecimal digit). A frame that hits this ACE matches this
DMAC value.
VLAN Parameters
802.1Q Tagged Specify whether frames can hit the action according to the 802.1Q tagged. The